CVE-2024-43864

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net/mlx5e: Fix CT entry update leaks of modify header context<br /> <br /> The cited commit allocates a new modify header to replace the old<br /> one when updating CT entry. But if failed to allocate a new one, eg.<br /> exceed the max number firmware can support, modify header will be<br /> an error pointer that will trigger a panic when deallocating it. And<br /> the old modify header point is copied to old attr. When the old<br /> attr is freed, the old modify header is lost.<br /> <br /> Fix it by restoring the old attr to attr when failed to allocate a<br /> new modify header context. So when the CT entry is freed, the right<br /> modify header context will be freed. And the panic of accessing<br /> error pointer is also fixed.